The following Fedora EPEL 7 Security updates need testing:
Age URL
262
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut...
146
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1087/dokuwiki-0-...
129
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1421/quassel-0.1...
67
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6262/cabal-insta...
53
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1545/strongswan-...
42
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6813/chicken-4.9...
20
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7143/nx-libs-3.5...
12
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7249/python-djan...
10
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7297/uwsgi-2.0.1...
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7334/lighttpd-1....
5
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7366/wordpress-4...
0
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7493/lxc-1.0.7-2...
The following builds have been pushed to Fedora EPEL 7 updates-testing
jwhois-4.0-42.el7
lxc-1.0.7-2.el7
php-horde-horde-5.2.7-1.el7
php-horde-imp-6.2.10-1.el7
php-horde-ingo-3.2.6-1.el7
php-horde-kronolith-4.2.9-1.el7
php-horde-mnemo-4.2.7-1.el7
php-horde-passwd-5.0.3-1.el7
php-horde-turba-4.2.8-1.el7
php-horde-wicked-2.0.4-1.el7
python-line_profiler-1.0-6.el7
Details about builds:
================================================================================
jwhois-4.0-42.el7 (FEDORA-EPEL-2015-7495)
Internet whois/nicname client
--------------------------------------------------------------------------------
Update Information:
Update jwhois.conf from GitHub
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 2 2015 Robert Scheck <robert(a)fedoraproject.org> - 4.0-42
- Update jwhois.conf from GitHub
--------------------------------------------------------------------------------
================================================================================
lxc-1.0.7-2.el7 (FEDORA-EPEL-2015-7493)
Linux Resource Containers
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2015-1331, CVE-2015-1334.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 2 2015 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.0.7-2
- Add security fixes, see rhbz#1245939 and rhbz#1245941.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1245941 - CVE-2015-1334 lxc: possible unconfined code execution
https://bugzilla.redhat.com/show_bug.cgi?id=1245941
[ 2 ] Bug #1245939 - CVE-2015-1331 lxc: directory traversal flaw
https://bugzilla.redhat.com/show_bug.cgi?id=1245939
--------------------------------------------------------------------------------
================================================================================
php-horde-horde-5.2.7-1.el7 (FEDORA-EPEL-2015-7487)
Horde Application Framework
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 5.2.7-1
- Update to 5.2.7
- raise dependency on Horde_Perms 2.1.5
--------------------------------------------------------------------------------
================================================================================
php-horde-imp-6.2.10-1.el7 (FEDORA-EPEL-2015-7487)
A web based webmail system
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 6.2.10-1
- Update to 6.2.10
--------------------------------------------------------------------------------
================================================================================
php-horde-ingo-3.2.6-1.el7 (FEDORA-EPEL-2015-7487)
An email filter rules manager
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 2 2015 Remi Collet <remi(a)fedoraproject.org> - 3.2.6-1
- Update to 3.2.6
--------------------------------------------------------------------------------
================================================================================
php-horde-kronolith-4.2.9-1.el7 (FEDORA-EPEL-2015-7487)
A web based calendar
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 4.2.9-1
- Update to 4.2.9
--------------------------------------------------------------------------------
================================================================================
php-horde-mnemo-4.2.7-1.el7 (FEDORA-EPEL-2015-7487)
A web based notes manager
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 4.2.7-1
- Update to 4.2.7
--------------------------------------------------------------------------------
================================================================================
php-horde-passwd-5.0.3-1.el7 (FEDORA-EPEL-2015-7487)
Horde password changing application
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 5.0.3-1
- Update to 5.0.3
--------------------------------------------------------------------------------
================================================================================
php-horde-turba-4.2.8-1.el7 (FEDORA-EPEL-2015-7487)
A web based address book
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 4.2.8-1
- Update to 4.2.8
--------------------------------------------------------------------------------
================================================================================
php-horde-wicked-2.0.4-1.el7 (FEDORA-EPEL-2015-7487)
Wiki application
--------------------------------------------------------------------------------
Update Information:
**horde 5.2.7**
* [mjr] Don't create a session for Webdav requests (Bug #14040).
* [jan] Mark PHP 5.6 as officially supported.
* [mjr] Fix some issues with the permission interface when a value of 0 is a valid
permission value (Bug #14025).
**imp 6.2.10**
* minor bug fix
**kronolith 4.2.9**
* [mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
* [mjr] Honor workweek view as the login_view (Bug #14042).
* [mjr] Fix Permission Denied error after removing a currently displayed timeObject (Bug
#14022).
* [jan] Enable purge calendar checkbox if user has delete permissions.
* [mjr] Honor locking the remote_cals preference.
* [mjr] Fix detecting duplicate events during import via the API (Bug #14018).
**mnemo 4.2.7**
* [jan] Update Italian translation.
* [jan] Update Czech translation.
* [mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients (Bug
#14045).
* [mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
**passwd 5.0.3**
* [jan] Update Italian translation.
* [jan] Update Galician translation.
* [jan] Update Catalan translation.
* [jan] Update German translation.
* [jan] Update Czech translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
**turba 4.2.8**
* [mjr] Fix issue where sidebar links point to incorrect address book.
**wicked 2.0.4**
* [jan] Update Italian translation.
* [jan] Update Brazilian Portuguese translation (Luis Felipe Marzagao).
* [mjr] Fix fatal error in API due to incorrect access of protected member.
* [mjr] Fix fatal error in Whups_Api::getMultiplePageInfo due to erroneous include.
**ingo 3.2.6**
* [mjr] Fix using transport parameters in Procmail driver.
* [jan] Update Czech translation.
* [jan] Update Italian translation.
* [mjr] Fix selecting incorrect rule when performing any action after reordering (Bug
#14064 and Bug #13643).
* [jan] Fix duplicate messages when using the redirect-and-keep rule with Procmail
backends.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 1 2015 Remi Collet <remi(a)fedoraproject.org> - 2.0.4-1
- Update to 2.0.4
--------------------------------------------------------------------------------
================================================================================
python-line_profiler-1.0-6.el7 (FEDORA-EPEL-2015-7498)
Line-by-line profiler for python
--------------------------------------------------------------------------------
Update Information:
Initial Commit for epel7 branch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1241919 - Review Request: python-line_profiler - Line-by-line profiler for
Python.
https://bugzilla.redhat.com/show_bug.cgi?id=1241919
--------------------------------------------------------------------------------